2. 10 Things You Need to Know AboutData Security Melanie Wyne, J.D. Sr. Technology Policy Representative Government Affairs Division NAR

3. Data Breach is Inevitable

4. Complex Regulatory Environment

5. What Info are You Collecting?

6. Do You Need Everything You Collect? No one can steal what you don’t have Make certain you have a current business purpose for all info you collect Hold on to information only as long as you have a legitimate business need.

7. If you Need the Data—Secure It! Make sure only the employees/associates who need access to data have it. – Control access to databases containing sensitive personal information – Locked cabinets for paper files – Require secure passwords and authentication Complex/unique passwords – Antivirus software – Encrypt data during storage and transmission

8. Secure Remote Access to Your Network Secure mobile access points—phones, tablets other mobile devices Think about 3 rd party access to your network/data – Restrict access to specific IP addresses – Grant only temporary/limited access

9. Consider Vendors/Service Providers Insist that appropriate security standards are part of your vendor contracts Seek indemnification

10. Security is an Ongoing Process Update/patch 3 rd party software Continuously train employees

11. Prepare for a Breach Ahead of Time Identify single point of contact in the case of a breach Draft consumer notice Consider professionals/consultants necessary – IT – Legal – Media – Government Affairs

12. Resources Realtor.org Privacy & Data Security toolkit Federal Trade Commision FTC.gov

13. Thank You Melanie Wyne mwyne@realtors.org @nartech